Abstract: An industrial control system (ICS) communicates via ICS protocols. A model is deployed in an information technology (IT) and operation technology (OT) network. Security policies are dynamically updated as the particular IT and OT network are used, patched, and modified. A deep packet inspection is used to enforce ICS constraints and ICS behaviors defined by the initial model. A state of the deep packet inspection is reported for situational awareness and debugging purposes. An alert is transmitted when anomalies are detected when ICS protocol traffic traverses ICS firewall network paths that execute ICS policies.

Abstract: An apparatus includes multiple interfaces configured to be coupled to multiple communication buses, where the interfaces are configured to receive bus traffic transmitted over the communication buses. The apparatus also includes one or more processing devices configured to implement an intrusion detection system. The intrusion detection system is configured to analyze the bus traffic received via one or more of the interfaces to identify anomalous bus traffic. The one or more processing devices are configured to execute multiple processes to concurrently analyze the bus traffic, and the multiple processes are configured to perform different analyses of the bus traffic.

Abstract: An apparatus includes multiple interfaces configured to be coupled to multiple communication buses, where the interfaces are configured to receive bus traffic transmitted over the communication buses. The apparatus also includes one or more processing devices configured to implement an intrusion detection system. The intrusion detection system is configured to analyze the bus traffic received via one or more of the interfaces to identify anomalous bus traffic. The one or more processing devices are configured to execute multiple processes to concurrently analyze the bus traffic, and the multiple processes are configured to perform different analyses of the bus traffic.

Abstract: A method can include detection of policy anomalies in packets on a 1553B bus of an airborne system. A computer network defense (CND) capability message is decoded and indicates an interface to monitor. The interface is a 1553B bus of the airborne system. A CND command message, associated with the CND capability message, is decoded and includes a policy set. Packets are received from the 1553B bus. The 1553B packets are analyzed based on the policy set to determine anomalies. Non-anomalous 1553B packets are allowed to reach destinations of the non-anomalous 1553B packets. Anomalous 1553B packets are discarded such that the anomalous 1553B packets do not reach respective destinations of the anomalous 1533B packets.

Abstract: A method can include command and control of a computer network defense (CND) system using open mission (OMS) constructs. A mission data file (MDF) is processed. A target interface, which is a 1553B bus, is determined from the MDF. A CND capability message that extends an OMS capability message and indicates the target interface is encoded. A CND command message that extends an OMS command message is decoded. The CND command message is validated. The target interface is bound based on validation of the CND command message. A CND command status message is encoded based on validation of the CND command message. The CND command status message extends an OMS command status message.

Abstract: An industrial control system (ICS) communicates via ICS protocols. A model is deployed in an information technology (IT) and operation technology (OT) network. Security policies are dynamically updated as the particular IT and OT network are used, patched, and modified. A deep packet inspection is used to enforce ICS constraints and ICS behaviors defined by the initial model. A state of the deep packet inspection is reported for situational awareness and debugging purposes. An alert is transmitted when anomalies are detected when ICS protocol traffic traverses ICS firewall network paths that execute ICS policies.

Abstract: A filter for filtering micro-emboli from a patient's blood during an angioplasty procedure is disclosed which comprises a plurality of curved wires connected to a rod between a first connector fixed with respect to the rod and a second connector slidingly mounted on the rod. Two layers of filter material are connected to opposite sides of the wires, and each layer includes perforations which are offset from the perforations in the other layer. When the rod and the wires are disposed within a catheter, the inner wall of the catheter compresses the wires toward the rod and when the rod is extended from the catheter, the wires resume their curved shape and pull the sliding connector along the rod toward the fixed connector.

Abstract: A filter for filtering micro-emboli from a patient's blood during an angioplasty procedure is disclosed which comprises a plurality of curved wires connected to a rod between a first connector fixed with respect to the rod and a second connector slidingly mounted on the rod. Two layers of filter material are connected to opposite sides of the wires, and each layer includes perforations which are offset from the perforations in the other layer. When the rod and the wires are disposed within a catheter, the inner wall of the catheter compresses the wires toward the rod and when the rod is extended from the catheter, the wires resume their curved shape and pull the sliding connector along the rod toward the fixed connector.

Abstract: A filter for filtering micro-emboli from a patient's blood during an angioplasty procedure is disclosed which comprises a plurality of curved wires connected to a rod between a first connector fixed with respect to the rod and a second connector slidingly mounted on the rod. Two layers of filter material are connected to opposite sides of the wires, and each layer includes perforations which are offset from the perforations in the other layer. When the rod and the wires are disposed within a catheter, the inner wall of the catheter compresses the wires toward the rod and when the rod is extended from the catheter, the wires resume their curved shape and pull the sliding connector along the rod toward the fixed connector.

Abstract: A filter for filtering micro-emboli from a patient's blood during an angioplasty procedure is disclosed which comprises a plurality of curved wires connected to a rod between a first connector fixed with respect to the rod and a second connector slidingly mounted on the rod. Two layers of filter material are connected to opposite sides of the wires, and each layer includes perforations which are offset from the perforations in the other layer. When the rod and the wires are disposed within a catheter, the inner wall of the catheter compresses the wires toward the rod and when the rod is extended from the catheter, the wires resume their curved shape and pull the sliding connector along the rod toward the fixed connector.

Abstract: A filter for filtering micro-emboli from a patient's blood during an angioplasty procedure is disclosed which comprises a plurality of curved wires connected to a rod between a first connector fixed with respect to the rod and a second connector slidingly mounted on the rod. Two layers of filter material are connected to opposite sides of the wires, and each layer includes perforations which are offset from the perforations in the other layer. When the rod and the wires are disposed within a catheter, the inner wall of the catheter compresses the wires toward the rod and when the rod is extended from the catheter, the wires resume their curved shape and pull the sliding connector along the rod toward the fixed connector.

Abstract: A filter for filtering micro-emboli from a patient's blood during an angioplasty procedure is disclosed which comprises a plurality of curved wires connected to a rod between a first connector fixed with respect to the rod and a second connector slidingly mounted on the rod. Two layers of filter material are connected to opposite sides of the wires, and each layer includes perforations which are offset from the perforations in the other layer. When the rod and the wires are disposed within a catheter, the inner wall of the catheter compresses the wires toward the rod and when the rod is extended from the catheter, the wires resume their curved shape and pull the sliding connector along the rod toward the fixed connector.